diff --git a/setup/modules/FreeipaAnsible/ansible/baseuser-sync.service b/setup/modules/FreeipaAnsible/ansible/baseuser-sync.service
new file mode 100644
index 0000000..5365740
--- /dev/null
+++ b/setup/modules/FreeipaAnsible/ansible/baseuser-sync.service
@@ -0,0 +1,7 @@
+[Unit]
+Description=Sync FreeIPA BaseUser membership to local group
+After=sssd.service
+
+[Service]
+Type=oneshot
+ExecStart=/usr/local/bin/auto-add-baseuser.sh